Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • CISQ
  • CWE
  • OWASP
  • STIG (Security Technical Implementation Guide)
  • PCI (Payment Card Industry)
  • NIST (National Institute of Standards and Technology)
  • OMG (Object Management Group)

Configuration process

Anchor
config1
config1

...

Configuration process

These reports are based on templates provided with CAST Report Generator and therefore CAST Report Generator for Dashboards (v. ≥ 1.109.0) must be present on the server hosting running Apache Tomcat in hosting your Security Dashboard in order for the reports to function. Some additional configuration is also required as explained below.

Assuming CAST Report Generator for Dashboards is present on the host machine, the next step is to configure the dashboard. Edit the following file with a text editor:

Code Block
languagetext
%CATALINA_HOME%\webapps\CAST-Security\WEB-INF\report.properties

Find the following options and modify as explained below:

Code Block
languagetext
# Set the Report Generator path
# If this variable is not set then the document generation is considered as disabled.
# The path is probably something such as (Linux/Windows):
#report.reportGenerator=dotnet /opt/report-generator/CastReporting.Console.Core.dll 
#report.reportGenerator=dotnet c:\\ReportGenerator\\CastReporting.Console.Core.dll

# Set the directory of reports
#report.directory=/tmp/reports
#report.directory=c:\\temp\\reports

# Set the current Web Service URL. The current REST API called back by the Report Generator.
report.webServiceURL=http://localhost:8888/CAST-RESTAPI/rest

...

report.reportGenerator=dotnet

Add a new line pointing to the location of the CastReporting.Console.Core.dll (part of CAST Report Generator for Dashboards) on the server hosting Apache Tomcat. You can also uncomment and modify an example line. For example:

Code Block
languagetext
report.reportGenerator=dotnet c:\\ReportGeneratorforDashboards\\CastReporting.Console.Core.dll
Note
Note that the path to CastReporting.Console.Core.dll when using Microsoft Windows must always use double back slashes (\\) or single forward slashes (/) - the single back slash (\) is not valid.

...

report.directory=

Add a new line pointing to the temporary folder where the reports will be generated on the server hosting Apache Tomcat. You can also uncomment and modify an example line. For example:

Code Block
languagetext
report.directory=c:\\temp\\reports
Note

Note that:

  • the path to the temporary folder when using Microsoft Windows, must always use double back slashes (\\) or single forward slashes (/) - the single back slash (\) is not valid.
  • The user that Apache Tomcat is running as must have read/write access to this location. In Linux environments, typically the "rw-" permission is sufficient.

...

report.webServiceURL=

Modify the existing line to point to the RestAPI in your CAST Security Dashboard deployment. This is used by the CAST Report Generator for Dashboards. For example:

...

languagetext

...

In addition the report.properties file in your deployed Dashboard must be modfied.

See CAST Report Generator - CAST Report Generator for Dashboards for more detailed instructions about the configuration process.


Generation process

Choose a report type from the  Security Reports or Industry Compliance Reports category and click the Generate Report button:

...